Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-10 Thread Petr Spacek
On 10.5.2016 15:38, Petr Spacek wrote: > On 10.5.2016 15:26, Martin Basti wrote: >> >> >> On 10.05.2016 15:23, Petr Spacek wrote: >>> On 10.5.2016 14:44, Martin Basti wrote: On 10.05.2016 14:33, Petr Spacek wrote: > On 6.5.2016 10:20, Martin Basti wrote: >>

Re: [Freeipa-devel] Provisioning throughput

2016-05-10 Thread thierry bordaz
On 05/05/2016 03:44 PM, Petr Vobornik wrote: On 05/04/2016 02:20 PM, thierry bordaz wrote: Hello, I have been doing some tests/measures using https://github.com/freeipa/freeipa-tools/blob/master/create-test-data.py. The tool creates a set of typical users/hosts/groups... to

Re: [Freeipa-devel] [PATCH 0030] fix clean-dangling-ruv in topologies with only one CA

2016-05-10 Thread Martin Basti
On 29.04.2016 14:39, Stanislav Laznicka wrote: https://fedorahosted.org/freeipa/ticket/5840 Please review the attached patch. ACK Pushed to: master: 7098d98100d61f9ed2efc6d4db635c24f9786040 ipa-4-3: 040e9a12b0a7c9f73b899ad2b0df24ae27957417 -- Manage your subscription for the

Re: [Freeipa-devel] [PATCH] ca-less tests updated

2016-05-10 Thread Oleg Fayans
Hi David, After quite a while and some more struggles here comes the updated version of the patch together with other patches fixing things in ipatests/test_integration/tasks.py Server and replica installation was refactored in a way to utilize the code from tasks.py as much as it is possible

[Freeipa-devel] [PATCH] 0033 webui: Mention SAN names in 'Issue new certificate'

2016-05-10 Thread Pavel Vomacka
Hi all, please review the patch for webUI which adds SAN names into 'Issue new certificate' dialog. The SAN names are mentioned only in dialogs for requesting for host and service certificate, according to the design page: http://www.freeipa.org/page/V4/RFC_2818_certificate_compliance . I'm

Re: [Freeipa-devel] V4/RFC 2818 review

2016-05-10 Thread Aleš Mareček
Greetings! I've received the information from Milan who was UQE reviewer for this design document - ACK on the current version. Have a nice day, - alich - - Original Message - > From: "Fraser Tweedale" > To: "Alexander Bokovoy" > Cc:

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Martin Basti
On 10.05.2016 15:36, Abhijeet Kasurde wrote: On 05/10/2016 06:48 PM, Martin Basti wrote: On 10.05.2016 14:50, Gabe Alford wrote: On Tue, May 10, 2016 at 6:47 AM, Martin Basti wrote: On 10.05.2016 14:42, Gabe Alford wrote: On Tue, May 10, 2016 at 6:26 AM,

Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-10 Thread Petr Spacek
On 10.5.2016 15:26, Martin Basti wrote: > > > On 10.05.2016 15:23, Petr Spacek wrote: >> On 10.5.2016 14:44, Martin Basti wrote: >>> >>> On 10.05.2016 14:33, Petr Spacek wrote: On 6.5.2016 10:20, Martin Basti wrote: > https://fedorahosted.org/freeipa/ticket/2008 > > Patches

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Abhijeet Kasurde
On 05/10/2016 06:48 PM, Martin Basti wrote: On 10.05.2016 14:50, Gabe Alford wrote: On Tue, May 10, 2016 at 6:47 AM, Martin Basti > wrote: On 10.05.2016 14:42, Gabe Alford wrote: On Tue, May 10, 2016 at 6:26 AM, Martin Basti

Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-10 Thread Martin Basti
On 10.05.2016 15:23, Petr Spacek wrote: On 10.5.2016 14:44, Martin Basti wrote: On 10.05.2016 14:33, Petr Spacek wrote: On 6.5.2016 10:20, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/2008 Patches attached.

Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-10 Thread Petr Spacek
On 10.5.2016 14:44, Martin Basti wrote: > > > On 10.05.2016 14:33, Petr Spacek wrote: >> On 6.5.2016 10:20, Martin Basti wrote: >>> https://fedorahosted.org/freeipa/ticket/2008 >>> >>> Patches attached. >>> >>> >>> freeipa-mbasti-0473-DNS-Locations-Always-create-DNS-related-privileges.patch >>>

Re: [Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

2016-05-10 Thread Martin Basti
Ok, I will update tickets On 10.05.2016 14:11, Gabe Alford wrote: Yeah. That makes sense. Let's fix it with the other logger tickets. Gabe On Tue, May 10, 2016 at 5:47 AM, Martin Basti > wrote: On 03.05.2016 15:41, Gabe Alford wrote:

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Martin Basti
On 10.05.2016 14:50, Gabe Alford wrote: On Tue, May 10, 2016 at 6:47 AM, Martin Basti > wrote: On 10.05.2016 14:42, Gabe Alford wrote: On Tue, May 10, 2016 at 6:26 AM, Martin Basti >

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Gabe Alford
On Tue, May 10, 2016 at 6:47 AM, Martin Basti wrote: > > > On 10.05.2016 14:42, Gabe Alford wrote: > > On Tue, May 10, 2016 at 6:26 AM, Martin Basti wrote: > >> >> >> On 10.05.2016 14:13, Gabe Alford wrote: >> >> On Tue, May 10, 2016 at 2:00 AM, Martin

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Martin Basti
On 10.05.2016 14:42, Gabe Alford wrote: On Tue, May 10, 2016 at 6:26 AM, Martin Basti > wrote: On 10.05.2016 14:13, Gabe Alford wrote: On Tue, May 10, 2016 at 2:00 AM, Martin Basti >

Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-10 Thread Martin Basti
On 10.05.2016 14:33, Petr Spacek wrote: On 6.5.2016 10:20, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/2008 Patches attached. freeipa-mbasti-0473-DNS-Locations-Always-create-DNS-related-privileges.patch From 9a936740da7cdacec150acc92a45041a98ce7cb3 Mon Sep 17 00:00:00

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Gabe Alford
On Tue, May 10, 2016 at 6:26 AM, Martin Basti wrote: > > > On 10.05.2016 14:13, Gabe Alford wrote: > > On Tue, May 10, 2016 at 2:00 AM, Martin Basti wrote: > >> >> >> On 04.05.2016 15:14, Gabe Alford wrote: >> >> On Tue, May 3, 2016 at 11:17 PM, Abhijeet

Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-10 Thread Petr Spacek
On 6.5.2016 10:20, Martin Basti wrote: > https://fedorahosted.org/freeipa/ticket/2008 > > Patches attached. > > > freeipa-mbasti-0473-DNS-Locations-Always-create-DNS-related-privileges.patch > > > From 9a936740da7cdacec150acc92a45041a98ce7cb3 Mon Sep 17 00:00:00 2001 > From: Martin Basti

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Martin Basti
On 10.05.2016 14:13, Gabe Alford wrote: On Tue, May 10, 2016 at 2:00 AM, Martin Basti > wrote: On 04.05.2016 15:14, Gabe Alford wrote: On Tue, May 3, 2016 at 11:17 PM, Abhijeet Kasurde

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Gabe Alford
On Tue, May 10, 2016 at 2:00 AM, Martin Basti wrote: > > > On 04.05.2016 15:14, Gabe Alford wrote: > > On Tue, May 3, 2016 at 11:17 PM, Abhijeet Kasurde < > akasu...@redhat.com> wrote: > >> Hi Gabe, >> >> I am wondering, how are we handling

Re: [Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

2016-05-10 Thread Gabe Alford
Yeah. That makes sense. Let's fix it with the other logger tickets. Gabe On Tue, May 10, 2016 at 5:47 AM, Martin Basti wrote: > > > On 03.05.2016 15:41, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5727. Per comment #7, > this removes

Re: [Freeipa-devel] [PATCH 0015] Added exception handling for mal-formatted XML Parsing

2016-05-10 Thread Abhijeet Kasurde
Hi All, Please find the patch for review. Thanks, Abhijeet Kasurde On 05/10/2016 01:13 PM, Martin Basti wrote: On 09.05.2016 07:26, Abhijeet Kasurde wrote: Hi all, Please review the patch. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1333755 Thanks, Abhijeet Kasurde Hello, +

Re: [Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

2016-05-10 Thread Martin Basti
On 03.05.2016 15:41, Gabe Alford wrote: Hello, Fix for https://fedorahosted.org/freeipa/ticket/5727. Per comment #7, this removes ipaserver-ca-install.log and uses ipareplica-ca-install.log. Thanks, Gabe Well, with this patch, ipa-ca-install on ca-less master server will log into

Re: [Freeipa-devel] [PATCH] Replaced find_hostname with api.env.host

2016-05-10 Thread Martin Basti
On 06.05.2016 06:26, Abhijeet Kasurde wrote: Hi All, Please review this patch. Thanks for mbasti for helping me. Thanks, Abhijeet Kasurde ACK Pushed to master: 865935739a37bb7c098f8379871648e776e582f2 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [PATCH 0111] Remove unused file install/share/fedora-ds.init.patc

2016-05-10 Thread Petr Spacek
Hello, Remove unused file install/share/fedora-ds.init.patch -- Petr^2 Spacek From 2defaed87ea26f7cbb0d625f7a8d7b57e15cda5c Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Tue, 10 May 2016 13:09:16 +0200 Subject: [PATCH] Remove unused file

Re: [Freeipa-devel] [PATCHES] 0786-0788 More Python 3 fixes

2016-05-10 Thread Martin Basti
On 06.05.2016 15:09, Petr Viktorin wrote: Hi, With these patches, xmlrpc_tests pass for me (except those that fail on py2, and, if python3-ipaserver is installed, some in permission that use ldap2 plugin). ACK master: * a9a13530988c616b331545ea02f539d39df64e27 Fix remaining relative

Re: [Freeipa-devel] V4/Sub-CAs review

2016-05-10 Thread Fraser Tweedale
Honza, thanks for the review. Comments inline. Copy Nalin, re certmonger discussion at the very bottom. On Mon, May 09, 2016 at 08:54:32AM +0200, Jan Cholasta wrote: > Hi, > > 1) > > > """ > The "upstream" root

Re: [Freeipa-devel] [PATCH 0096] Batch command: avoid accessing potentially undefined context.principa

2016-05-10 Thread Petr Spacek
On 4.5.2016 15:04, Jan Cholasta wrote: > Hi, > > On 22.4.2016 13:28, Petr Spacek wrote: >> Hello, >> >> Batch command: avoid accessing potentially undefined context.principal >> >> This might happen when the command is called directly in Python, >> e.g. in installers and so on. >> >> Pylint

Re: [Freeipa-devel] [TESTS][PATCH] Ping module tests in a non-declarative way

2016-05-10 Thread Martin Basti
On 28.04.2016 16:09, Martin Basti wrote: On 08.04.2016 10:32, Peter Lacko wrote: Hello, I have a few comments: 1) Please set up your git name and email correctly (consistently for all patches) this is not right From: root 2) -#

Re: [Freeipa-devel] [DESIGN] Lightweight CA renewal

2016-05-10 Thread Jan Cholasta
On 9.5.2016 18:27, Petr Vobornik wrote: On 05/09/2016 09:35 AM, Jan Cholasta wrote: Hi, On 6.5.2016 08:01, Fraser Tweedale wrote: Hullo all, FreeIPA Lightweight CAs implementation is progressing well. The remaining big unknown in the design is how to do renewal. I have put my ideas into

Re: [Freeipa-devel] [PATCH 0102] DNS: Fix upgrade - master to forward zone transformatio

2016-05-10 Thread Martin Basti
On 29.04.2016 13:56, Martin Basti wrote: On 26.04.2016 20:11, Petr Spacek wrote: Hello, DNS: Fix upgrade - master to forward zone transformation This happens when upgrading from IPA <= 4.0 to versions 4.3+. DNS caching might cause false positive in code which replaces master zone with

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-10 Thread Martin Basti
On 04.05.2016 15:14, Gabe Alford wrote: On Tue, May 3, 2016 at 11:17 PM, Abhijeet Kasurde > wrote: Hi Gabe, I am wondering, how are we handling "CalledProcessError" exception ? I am not sure 100% what you are asking, but from what I

Re: [Freeipa-devel] [PATCH 0014] Removed custom implementation of CalledProcessError

2016-05-10 Thread Martin Basti
On 09.05.2016 10:02, Petr Spacek wrote: On 7.5.2016 08:44, Abhijeet Kasurde wrote: Hi All, Please review this patch. ACK, I've verified that CalledProcessError signature in Python 2.7 and in the duplicate code is the same. Pushed to master: 51db9380cfc862993e1909602d2726e851f463b4 --

Re: [Freeipa-devel] [PATCH 0015] Added exception handling for mal-formatted XML Parsing

2016-05-10 Thread Martin Basti
On 09.05.2016 07:26, Abhijeet Kasurde wrote: Hi all, Please review the patch. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1333755 Thanks, Abhijeet Kasurde Hello, +self.raise_certificate_operation_error('parse', +